---
title: "How we test CGNAT: port blocks and logging | TEST4NET"
description: "Carrier-grade NAT on the CloudLAB bench: translations per second, concurrent sessions, port blocks per subscriber, logging cost, ALGs and stateful failover"
image: https://test4net.com/hubfs/blog-covers/how-we-test-cgnat.png
---

[Skip to content](https://test4net.com/blog/how-we-test-cgnat#main-content)

[![TEST4NET](https://test4net.com/hubfs/test4net-logo-fixed-2.svg)](https://test4net.com/?hsLang=en)

- Services
- Products
- Resources
- Company

- [English](https://test4net.com/blog/how-we-test-cgnat)
- [Русский](https://test4net.com/ru/blog/how-we-test-cgnat)
- [Հայերեն](https://test4net.com/hy/blog/how-we-test-cgnat)

[News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en)

- [English](https://test4net.com/blog/how-we-test-cgnat)
- [Русский](https://test4net.com/ru/blog/how-we-test-cgnat)
- [Հայերեն](https://test4net.com/hy/blog/how-we-test-cgnat)

What we test

By technology

Industries

[Load & Performance Testing Throughput, sessions and latency up to and past the rated limit](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing Features against the spec, RFC compliance with evidence](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing Multi-vendor behaviour, before it reaches production](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing NGFW, IPS and VPN efficacy and performance with threats on the wire](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design What to test, how, and what counts as a pass](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD Regression suites wired into your release pipeline](https://test4net.com/services/test-automation?hsLang=en) [Training Programs Hands-on courses for your test engineers](https://test4net.com/services/training-programs?hsLang=en) [Equipment Repair Repair and verification of test equipment](https://test4net.com/services/equipment-repair?hsLang=en) [All services](https://test4net.com/services?hsLang=en)

[Routing & Switching RFC 2544 and RFC 2889 on real ports, 1G to 100G](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW RFC 9411 throughput with inspection switched on](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [Load Balancers & ADC Connections, TLS and failover of the pair under load](https://test4net.com/solutions/load-balancers-adc?hsLang=en) [SD-WAN & WAN Path selection and QoS under emulated WAN conditions](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV Virtual appliances and cloud services under load](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core Transport and core functions under subscriber traffic](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi Wi-Fi 6 clients and access points, Wi-Fi 7 in progress](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure Storage networks and servers under realistic I/O](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2) Lossless Ethernet for GPU clusters: PFC, ECN, fabric load](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage)

[Telecom Operators Pre-deployment acceptance and vendor comparison](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors Independent validation of your product claims](https://test4net.com/solutions/industries#vendors) [System Integrators Proof for the customer before the rollout](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks Upgrades and new platforms checked before production](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en)

Not sure where to start?

Test plan and quote in 1–3 business days

Tell us what you run and what worries you. We propose the tests, tools and timeline.

[Request a test plan](https://test4net.com/contacts?hsLang=en)

CloudLAB

[How It Works Pick a scenario, run it in the live lab, get the report](https://test4net.com/cloudlab#how) [Equipment & Capabilities L2-3 to 100G, L4-7 past 200G, Wi-Fi, WAN emulation](https://test4net.com/cloudlab#equipment) [Access Plans Hourly sessions, subscriptions, dedicated racks](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing Ship the box or upload the VM, we run the tests](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com)

Our tools

[Traffic Generator L4-7 and security traffic past 200 Gbit/s, app mix library](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu Delay, jitter, loss and bandwidth shaping per link](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en)

New: our own test tools

Our own tools, in beta this autumn

Built in our lab, priced per gigabit. Join the beta list and see them first.

[Join the beta list](https://test4net.com/products#lead-form)

Read

Technologies / Protocols

Methodologies

[Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en) [Glossary Network testing terms in plain words](https://test4net.com/glossary?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en)

[BGP Route exchange, policy and convergence](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS IGP adjacency, flooding and SPF timing](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR LDP, RSVP‑TE and SR‑MPLS label paths](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN Overlay fabrics, MAC/IP routes, multi-homing](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2 Tunnel setup, rekeying and throughput](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS Handshakes, cipher suites and inspection](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2 Lossless Ethernet, PFC and ECN for AI fabrics](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7 802.11ax/be, OFDMA, MLO and roaming](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en)

[RFC 2544 Throughput, latency, frame loss and back-to-back](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889 LAN switch benchmarking: forwarding, MAC learning, congestion](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511 Firewall and NGFW performance benchmarking](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349 TCP throughput and buffer delay testing](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180 IPv6 benchmarking methodology](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564 Ethernet service activation: CIR, EIR, KPIs per service](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731 Ethernet OAM: delay, jitter, loss and SLA monitoring](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398 Wi-Fi in-premises performance test plan](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en)

Read

[Case studies, test insights and lab notes Blog](https://test4net.com/blog?hsLang=en) [What is changing in network testing and infrastructure Industry News](https://test4net.com/news?hsLang=en) [How the lab, sessions and reports work FAQ](https://test4net.com/faq?hsLang=en) [Network testing terms in plain words Glossary](https://test4net.com/glossary?hsLang=en)

[About Us Independent lab in Armenia, team and history](https://test4net.com/about?hsLang=en) [Why TEST4NET What you get that vendor slides never show](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications Bench capacity, methods and the standards we test against](https://test4net.com/lab?hsLang=en) [Partners Test tool vendors and IT partners we work with](https://test4net.com/partners?hsLang=en) [Contacts Talk to an engineer, not a sales bot](https://test4net.com/contacts?hsLang=en)

[Support portal](https://test4net.com/support?hsLang=en)

- Services
  
  What we test
  
  [Load & Performance Testing](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD](https://test4net.com/services/test-automation?hsLang=en) [Training Programs](https://test4net.com/services/training-programs?hsLang=en) [Equipment Repair](https://test4net.com/services/equipment-repair?hsLang=en) [All services](https://test4net.com/services?hsLang=en)
  
  By technology
  
  [Routing & Switching](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [Load Balancers & ADC](https://test4net.com/solutions/load-balancers-adc?hsLang=en) [SD-WAN & WAN](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2)](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage)
  
  Industries
  
  [Telecom Operators](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors](https://test4net.com/solutions/industries#vendors) [System Integrators](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en)
  
  [Not sure where to start? Test plan and quote in 1–3 business days](https://test4net.com/contacts?hsLang=en)
- Products
  
  CloudLAB
  
  [How It Works](https://test4net.com/cloudlab#how) [Equipment & Capabilities](https://test4net.com/cloudlab#equipment) [Access Plans](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com)
  
  Our tools
  
  [Traffic Generator](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en)
  
  [New: our own test tools Our own tools, in beta this autumn](https://test4net.com/products#lead-form)
- Resources
  
  Read
  
  [Blog](https://test4net.com/blog?hsLang=en) [Industry News](https://test4net.com/news?hsLang=en) [FAQ](https://test4net.com/faq?hsLang=en) [Glossary](https://test4net.com/glossary?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en)
  
  Technologies / Protocols
  
  [BGP](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en)
  
  Methodologies
  
  [RFC 2544](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en)
  
  Read
  
  [Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en) [Glossary Network testing terms in plain words](https://test4net.com/glossary?hsLang=en)
- Company
  
  [About Us](https://test4net.com/about?hsLang=en) [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications](https://test4net.com/lab?hsLang=en) [Partners](https://test4net.com/partners?hsLang=en) [Contacts](https://test4net.com/contacts?hsLang=en)

[News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en)

[All articles](https://test4net.com/blog)

[Telecom and WAN](https://test4net.com/blog/tag/telecom-and-wan)

# How we test CGNAT: translations per second, port blocks and logs

![](https://test4net.com/hubfs/IMG_0070.jpg) [Alexander Zemskov](https://test4net.com/blog/author/az) October 30, 2026 4 min read

[English](https://test4net.com/blog/how-we-test-cgnat) [Русский](https://test4net.com/ru/blog/how-we-test-cgnat) [Հայերեն](https://test4net.com/hy/blog/how-we-test-cgnat)

![How we test CGNAT: translations per second, port blocks and logs](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-cgnat.png?width=1600&height=900&name=how-we-test-cgnat.png)

In this article

A CGNAT datasheet gives two numbers: concurrent sessions and throughput. Sizing multiplies subscribers by an average session count, and on paper the sum works. At 21:00 the box hits other limits: how many new translations it creates per second, how many ports each subscriber gets, and how much load the translation logs kept for lawful requests put on it. We measure those with your subscriber count and your peak hour.

## The bench

The CGNAT goes onto the CloudLAB bench as an appliance or a router with a service card, or runs on the bench as a virtual function. The bench emulates subscribers on the inside, one address from the shared 100.64.0.0/10 range per home router, as the CGNAT sees them in NAT444, and internet servers on the outside. Traffic is stateful TCP and UDP from your profile: web, video, games, VoIP, DNS, with sessions per subscriber taken from a NetFlow export or a pcap of your peak hour. The configuration is yours as well: pools, port block size, timeouts, ALGs, logging mode and the HA pair.

Device counters and CPU are polled every second out of band. A log collector on the bench counts every record the box sends, on the same timeline as the [load test](https://test4net.com/services/load-performance-testing?hsLang=en), so a drop in setup rate lines up with the second the logs began to queue.

## What we check

- Setup rate: new translations per second, TCP and UDP apart, raised until mappings fail
- Concurrent ceiling: the table filled to the rated count with traffic flowing and production timeouts; what happens to the next session once it is full
- Port blocks: size and blocks per subscriber against the peak profile; a subscriber who runs out gets a new block or loses sessions, with the same public address or another
- Logging: per session against per port block, records per second over syslog or IPFIX, the setup rate with logging on and off
- ALGs: SIP and FTP through translation, addresses inside the payload rewritten correctly, the setup rate with each ALG on
- Hairpinning and mapping: 2 subscribers behind the same CGNAT reach each other through public addresses; endpoint-independent mapping and filtering for games and VoIP
- Stateful failover: the active node pulled under load; sessions kept per protocol, port blocks and public addresses kept, seconds to full rate

The forwarding baseline per frame size, IPv4 and IPv6 on the same ports, follows the [RFC 5180](https://test4net.com/methodologies/rfc-5180?hsLang=en) procedure. NAT64, DS-Lite and the other transition mechanisms have their own post: [how we test IPv6 transition](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en).

## What usually breaks

The port block. In a typical project the plan gives 512 ports per block and up to 4 blocks per subscriber, sized on an average of a few dozen sessions per household. At peak, a home with a torrent client next to a games console reaches the 4th block, and its new sessions are dropped. The box counts those drops in a counter nobody polls and writes no log record about them.

Logging. Per-session logs turn every new translation into a record. In a typical project the setup rate fell by about a third once the log stream ran at full peak, and the collector lost records before the box did. Port block logging writes one record per block, and the cost on the box nearly vanished.

Failover. The HA pair syncs sessions, the active node goes down under load, and TCP sessions survive. UDP mappings created in the last second before the switch never reached the standby: VoIP and games behind them register again, and some subscribers come back with another public address and get logged out of their bank. «Stateful failover» on the datasheet holds for most sessions, and the report counts the ones it misses.

## What is in the report

Translations per second and the concurrent ceiling per traffic profile and per logging mode, with CPU next to each. The port block plan checked against your peak hour: the share of subscribers who hit the cap and what the box did then. Log records per second and records lost, on the box and on the collector. ALG and hairpinning results per protocol, with captures. For failover: sessions lost by protocol, subscribers whose public address changed, seconds to full rate. The next release reruns the same cases from the attached configuration and profile.

## Where to start

Send us the platform, the subscriber count, the pool and port block plan and a NetFlow export of the peak hour. We answer with a draft test plan: the items, the bench layout and the dates. The report is yours to keep and to show to the vendor. [Write to us](https://test4net.com/contacts?hsLang=en) or look at [what else the bench does](https://test4net.com/services?hsLang=en).

Share

Pass it on to someone who runs a network

Independent lab data is most useful in the hands of the people who make the call. Send this piece to a colleague.

[LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-cgnat) [X](https://twitter.com/intent/tweet?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-cgnat&text=How+we+test+CGNAT%3A+translations+per+second%2C+port+blocks+and+logs) [Telegram](https://t.me/share/url?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-cgnat&text=How+we+test+CGNAT%3A+translations+per+second%2C+port+blocks+and+logs) [WhatsApp](https://wa.me/?text=How+we+test+CGNAT%3A+translations+per+second%2C+port+blocks+and+logs%20https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-cgnat)

Copy link

More apps

![](https://test4net.com/hubfs/IMG_0070.jpg)

Written by

### [Alexander Zemskov](https://test4net.com/blog/author/az)

Alexander Zemskov leads network and security testing at TEST4NET, an independent, vendor-neutral testing lab in Yerevan, Armenia. With 19+ years in performance and load testing on IXIA, Spirent, Keysight, Xena and Xinertel platforms, he runs NGFW, WAF, IPS, DLP and SASE evaluations for telecom operators, banks and system integrators.

[LinkedIn](https://www.linkedin.com/in/azemskov/) [Website](https://test4net.com/?hsLang=en)

[Previous article How we test application QoE: transaction time per user](https://test4net.com/blog/how-we-test-application-qoe?hsLang=en) [Next article How we test packet brokers: dedup, slicing and the tool port](https://test4net.com/blog/how-we-test-packet-brokers?hsLang=en)

In this article

On the bench

### Have a device to put through this?

Send us the shortlist and the KPIs that decide it. We will come back with a scoped test plan, a timeline and a fixed price.

[Talk to a test engineer](https://test4net.com/contacts?hsLang=en)

Blog

## Keep reading

[![How we measure power under load: watts per Gbps at 4 load steps](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-measure-power-under-load.png?width=880&height=550&name=how-we-measure-power-under-load.png)](https://test4net.com/blog/how-we-measure-power-under-load?hsLang=en)

[Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology)

### [How we measure power under load: watts per Gbps at 4 load steps](https://test4net.com/blog/how-we-measure-power-under-load?hsLang=en)

The datasheet of a switch, router or firewall gives two power figures: "typical" and "maximum". Neither says at what load, with which optics or at what inlet temperature.…

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 5 min read

[![How we test remote-access VPN: 9:00 logins, MFA and failover](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-remote-access-vpn.png?width=880&height=550&name=how-we-test-remote-access-vpn.png)](https://test4net.com/blog/how-we-test-remote-access-vpn?hsLang=en)

[Security](https://test4net.com/blog/tag/security-performance)

### [How we test remote-access VPN: 9:00 logins, MFA and failover](https://test4net.com/blog/how-we-test-remote-access-vpn?hsLang=en)

A VPN concentrator datasheet gives a user count and a throughput figure, both taken separately: thousands of idle tunnels for the first, a few fat ones for the second. A …

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 5 min read

[![How we test IPv6 and transition: dual stack, NAT64, 464XLAT](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-ipv6-transition.png?width=880&height=550&name=how-we-test-ipv6-transition.png)](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en)

[Routing and switching](https://test4net.com/blog/tag/routing-and-switching)

### [How we test IPv6 and transition: dual stack, NAT64, 464XLAT](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en)

A router datasheet shows IPv6 as a tick next to IPv4, with one throughput figure for both. On the bench the two protocols often part ways: at small packets, with an exten…

![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 4 min read

[![TEST4NET LLC](https://test4net.com/hubfs/test4net-logo-fixed.svg)](https://test4net.com?hsLang=en)

Independent testing and validation for telecom, information security and cloud infrastructure – real insights, not assumptions

<https://www.linkedin.com/company/test4net> <https://wa.me/37491612709> <https://t.me/TEST4NET> [mailto:sales@test4net.com](mailto:sales@test4net.com) <https://www.facebook.com/people/Test4net-LLC/61591470856077/> <https://www.youtube.com/@TEST4NET>

#### Navigate

- [Home](https://test4net.com/?hsLang=en)
- [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en)
- [About us](https://test4net.com/about?hsLang=en)
- [Contact](https://test4net.com/contacts?hsLang=en)
- [Blog](https://test4net.com/blog?hsLang=en)
- [Industry News](https://test4net.com/news?hsLang=en)

#### Get in touch

Sales

[sales@test4net.com](mailto:sales@test4net.com)

Support

[support.test4net.com](https://support.test4net.com)

© 2026 TEST4NET LLC. All rights reserved.

[Privacy Policy](https://test4net.com/privacy-policy?hsLang=en) [Legal](https://test4net.com/legal?hsLang=en)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Alexander Zemskov",
    "url" : "https://test4net.com/blog/author/az"
  },
  "dateModified" : "2026-10-30T04:23:14.988Z",
  "datePublished" : "2026-10-30T04:23:14.000Z",
  "headline" : "How we test CGNAT: port blocks and logging | TEST4NET",
  "image" : [ "https://test4net.com/hubfs/blog-covers/how-we-test-cgnat.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://test4net.com/blog/how-we-test-cgnat",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://test4net.com/hubfs/test4net-logo-fixed.svg"
    },
    "name" : "TEST4NET LLC"
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://test4net.com/#organization",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "AM",
    "addressLocality" : "Yerevan",
    "postalCode" : "0033",
    "streetAddress" : "3 Hakob Hakobyan Street (Mergelyan Hub)"
  },
  "alternateName" : "TEST4NET",
  "contactPoint" : {
    "@type" : "ContactPoint",
    "availableLanguage" : [ "en", "ru", "hy" ],
    "contactType" : "sales",
    "email" : "sales@test4net.com",
    "telephone" : "+374-60-88-88-99"
  },
  "description" : "Independent, vendor-neutral lab for testing network and cybersecurity products — NGFW, WAF, IPS, DLP and SASE — and an authorized distributor of test, measurement and network infrastructure solutions.",
  "email" : "sales@test4net.com",
  "foundingDate" : "2024",
  "image" : "https://test4net.com/hubfs/og-t4n.png",
  "logo" : "https://test4net.com/hubfs/test4net-logo-fixed-2.svg",
  "name" : "TEST4NET LLC",
  "sameAs" : [ "https://www.linkedin.com/company/test4net/", "https://t.me/TEST4NET", "https://www.facebook.com/people/Test4net-LLC/61591470856077/" ],
  "telephone" : "+374-60-88-88-99",
  "url" : "https://test4net.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://test4net.com/#website",
  "@type" : "WebSite",
  "inLanguage" : "en",
  "name" : "TEST4NET",
  "potentialAction" : {
    "@type" : "SearchAction",
    "query-input" : "required name=search_term_string",
    "target" : {
      "@type" : "EntryPoint",
      "urlTemplate" : "https://test4net.com/hs-search-results?term={search_term_string}"
    }
  },
  "publisher" : {
    "@id" : "https://test4net.com/#organization"
  },
  "url" : "https://test4net.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://test4net.com/",
    "name" : "TEST4NET",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://test4net.com/blog",
    "name" : "Blog",
    "position" : 2
  }, {
    "@type" : "ListItem",
    "item" : "https://test4net.com/blog/how-we-test-cgnat",
    "name" : "How we test CGNAT: translations per second, port blocks and logs",
    "position" : 3
  } ]
}
```